wikical is committed to the professional management of personal data. The
personal data which you enter would never be passed on to unauthorized
third parties. Where the service provider is subject to a legal requirement
to collect data about its users, such data would be stored only for the
period that is mandated by law.

A. Server log file

Every time you access our web service wikical the servers log your
request in files that are kept for a limited period of time.
The stored data comprises the IP-address of your computer with a
date and time stamp, the uniform resource identifier (URI) of the
requested resources, the referring web site (referrer URI), some
identifiers of the operating system, client software, protocols and
carriers when available. The technical administration of our
service infrastructure collects these data for the sole purpose of
being able to investigate server load issues and security.
An analysis of the data would take place in the event of server load
problems, of an attack on the information technology infrastructure
of the service, or for statistical purposes of server load.

According to Article 6, Paragraph 1, Point F, and recital 49 of the
GDPR, access server logs (described above) are kept for 100 days.
Error server logs, which are generated only when an unexpected
error occurs and additionally contain system state information,
are kept for 200 days. The system state information in the error logs
may contain the location of the user which generated the error,
versions of software used, search terms, and stack traces, which
are the parts of the software executed including times and data.
Additionally, in the case of a security incident, we keep security
server logs for 400 days. The data stored is described at
ModSecurity Logs.

B. Use of Cookies

The internet protocol RFC2965 specifies HTTP "cookies" for the technical
administration of a user session. Cookies are small text files. By
consent a web browser automatically saves cookies on your connecting
device when you request the wikical site. Cookies are necessary so that
the service provider wikical can process the web requests of the
users in a timely manner. Users enjoy a right to object to the use
of cookies ("opt-out"). wikical uses cookies for the envisaged
technical purpose, and does not make use of the controversial
cross-site tracking cookies.

C. Use of our web analytics Matomo

wikical operates an in-house solution for web analytics using
Matomo (formerly Piwik). Our installation of Matomo is configured
to not store any personal data. The stored Matomo data comprises
an anonymized version of the IP address of a request, time stamp
and the duration of the visit, the specific pages which are
accessed, browsers, plugins, search engines and referring pages
(referrer URI).

wikical applies the results from the Matomo
web analytics tool to improve user navigation and service quality of
wikical. Under no circumstances wikical would reconcile the data in
Matomo with other records of your personal data. Technical security
measures and direct instructions to our system administrators
prohibit data merge and reconnaissance of pseudonyms. wikical
shares anonymized, aggregated media data with the general public.

D. Segmentation

In order to differentiate types of users, wikical associates tags with
user accounts and emails. These tags can indicate for instance that
the account is used weekly, or that it has never used some specific
functionality of wikical. wikical uses these tags to present different
messages or send different kinds of emails.

E. Registration of a user account

While signed in as a user of the website wikical, the following
data is stored in the database: time stamp of registration, IP address of the
computer, user identification, counter-phrase of the password ("hash"),
where applicable full name, where applicable profile image, address of
the electronic mail (email), a membership in groups,
time zone, city and country. When you sign in as a user, you can always
edit your "public profile" and add more information about yourself. wikical
invites you to use a pseudonym instead of your real name.

Not-signed-in users can choose to be notified for future matches of
searches by providing their email. The recipient of the email will receive
a confirmation link. If confirmed, the email address will be stored until
the link to cancel the subscription is used. If not confirmed, the
email will be deleted within 14 days. These storage and deletion
occur in the database. Encrypted, incremental database backups
will retain the email from up to 400 days, allowing the recovering
of the data according to Article 32 of the GDPR in the case of an
incident.

You have the right to access all your personal data saved in wikical, which
is accessible to you at any time in your profile settings. You can
ask us at any time for a copy of all the personal data we have on you.
If you think that the way we process your personal data with Matomo
analytics is infringing the law, you have the right to lodge a
complaint with a supervisory authority.

F. Removal of a user account

When a user account is removed, the following data will be
irreversibly erased: username, email, name,
profile image (if any), nation, city and time zone. In addition, wikical
erase associations of a user to social networks and to her
activity. Some entries remain in wikical such as edited and
contributed events, images, comments, and activities but they will
be attributed to a general "former user".

The irreversibly erasure occurs in the database within 14 days.
Encrypted, incremental database backups will retain all the data
up to 400 days, allowing the recovering of the data according to
Article 32 of the GDPR in the case of an incident.

G. Use of personal data

wikical processes and uses your personal data for the mere purpose
to provide and optimize the wikical services for you. Email contact
data is used for automated confirmation of registration via email.
Optionally you may get notified about events by email ("opt-in").
It is a fully automated service. By no means an IP address will be
reconciled with personal data from other sources. IP addresses are
masked in order to render a mapping impossible. Depending on
technical capabilities you are free to submit geographic indicators
(location information) to the service provider in order to better
customize search results. At wikical specific technical and
organizational state-of-the-art measures are taken for the
protection of personal data.

H. Recipient of the personal data

The personal data received are sent exclusively to wikical and to
our web hosting provider Hetzner Online GmbH, Gunzenhausen, Germany.
All data is stored exclusively in Germany. A contract based on
Article 28 of the GDPR is available between wikical and Hetzner.

I. Professional confidentiality of technical administrators

The service provider organizes the operation of wikical that only those
staffers get access to the data where they require it in the
performance of their activities. These staffers have signed
confidentiality agreements, and have to bear serious consequences for
breach of confidentiality, such as termination and criminal/civil
sanctions.

J. Links to external web services

The service provider cannot exercise control over external sites linked
from the wikical site. These web sites may set their own cookies or spy
on their users' personal information.

K. Policy extension for mobile apps

The service provider offers apps for mobile devices like iPhones
and Android devices that can access data of the service.
The apps, when permitted by the user, determine the user's
geographic position (geolocation) through either WiFi or GPS of the
user's device and pass that position to the service provider to
retrieve positional data like nearest events.
The apps and the servers of the service provider retain only the
latest retrieved position. They do not keep a history of the user's
previous positions. They do not keep or require any other user or
device information.

L. Policy extension for social connections

When connecting your account to a provider like Facebook or
Google+, wikical will use basic information from that account,
like your name, user-id, username, email, your profile picture and
your location. Your email will be used to send you notifications
that you can stop at any time. When a location is not available,
wikical will use your IP to guess your location.

M. Automated decision-making

wikical tries to display to you more interesting events for
you in your events feed, but only if you sign in.
In this case, wikical stores attached to your account the events
you add to wikical, import or add to your groups, the items you
follow, your likes, dislikes, the pictures you upload to wikical,
your filters, your comments and messages. You can see anytime all
this information on your settings page and ask for a copy of it.
The city and country associated to your account can also be used
for your feed. This association can take place when you sign in
based on your IP. Some of this data is used to personalize your
feed. You can opt-out of this personalization at any time by
signing out.